S
Tue Oct 05 05:21:37 CDT 2004
Here's how to disable the device class in XP:
http://support.microsoft.com/?id=823732
I think the procedure will be the same in W2K.
Enabling on per-user basis is hardly doable, as the hardware and file system
support are system-wide and available to all users.
Mind you, disabling USB storage isn't an effective security control: if you
have to prevent confidential information leaks, you'll have to control all
hardrware, e-mail remote access and clipboard functions, on top of general
FS access auditing. If you want to implement efficient controls around
documents, consider a DRM solution; if you need to protect a database -
harden the server, use NIDS and offline security logs, and make sure
physical security is reliable.
--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-
"WaDDaH" <anonymous@discussions.microsoft.com> wrote in message
news:3db801c4aab7$a0feb280$a401280a@phx.gbl...
> Hi all
>
> I have a domain controller and i am trying to limit my
> users from installing USB memory sticks or flash memory
> from being installed on their machines... i tried to hide
> some drives using GPO but this is not an effecient way to
> disable this thing.. can you tell me how can i disable
> this on some users and others enable